TI-2025-29799 Aliases CVE-2025-47269 GHSA-p483-wpfp-42cj

code-server session cookie can be extracted by having user visit specially crafted proxy URL

HIGH 71CWE-441Published 2025-05-09 · Updated 2025-05-10

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL `https://<code-server>/proxy/[email protected]/path` would be proxied to `[email protected]/path` where the attacker could exfiltrate a user's session token. Any user who runs code-server with the built-in proxy enabled and clicks on maliciously crafted links that go to their code-server instances with reference to /proxy. Normally this is used to proxy local ports, however the URL can reference the attacker's domain instead, and the connection is then proxied to that domain, which will include sending cookies. With access to the session cookie, the attacker can then log into code-server and have full access to the machine hosting code-server as the user running code-server. This issue has been patched in version 4.99.4.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.56284 99th percentileScored 2026-11-07

Fix Fixed code-server (coder): 4.99.4code-server (npm): 4.99.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
coder	code-server	before 4.99.4	4.99.4	Patch available	CNA
—	code-server (npm)	before 4.99.4	4.99.4	Patch available	GHSA-p483-wpfp-42cj

code-server Vendorcoder Affected before 4.99.4 Fixed in 4.99.4 Patch available CNA
code-server (npm) Vendor— Affected before 4.99.4 Fixed in 4.99.4 Patch available GHSA-p483-wpfp-42cj

Remediation

Fix · CNA code-server (coder) Fixed in 4.99.4
Fix · GHSA-p483-wpfp-42cj code-server (npm) Fixed in 4.99.4 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-47269
2026-10-03 Alias added: GHSA-p483-wpfp-42cj
2026-11-01 EPSS moved to the 99th percentile and above

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2025-47269

Other 4

TI-2025-37344 AgentAPI exposed user chat history via a DNS rebinding attack CVSS 3.1MEDIUM 6.5
TI-2026-34071 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft CVSS 3.1CRITICAL 9.1
TI-2026-32394 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent CVSS 3.1HIGH 8.8
TI-2026-27585 Code Extension Marketplace has a Zip Slip Path Traversal CVSS 4.0HIGH 8.7
TI-2024-18523 Coder's OIDC authentication allows email with partially matching domain to register CVSS 3.1HIGH 8.2
TI-2023-11339 Origin validation error in code-server CVSS 3.1CRITICAL 9.3

See all 42 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences